December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

LONDON, Dec 10 (Reuters) - Venture Global (VG.N), opens new tab submitted its response late on Tuesday to a legal challenge from Shell (SHEL.L), opens new tab over the oil major's defeat in an ...

Plugging the React2Shell vulnerability in the open source React server and Next.js in IT environments has just become even more urgent with reports that exploits are already in the wild. Researchers ...

Dec 11 (Reuters) - SLB (SLB.N), opens new tab said on Thursday that it was partnering with Shell (SHEL.L), opens new tab to develop digital and artificial intelligence tools aimed at improving ...

In December 2025, CVE-2025-55182 (React2Shell), a vulnerability in React Server Components (RSC) that enables remote code execution (RCE), was publicly disclosed. Shortly after publication, multiple ...

As soon as public exploit code is circulating, the first reports of attacks on React servers are emerging. Security patches are available. The "critical" vulnerability (CVE-2025-55182 CVSS Score 10 ...

Critical security vulnerabilities have been found in quick succession in React, widely used for website development. The core flaw, React2shell, is classified as a major security vulnerability capable ...

The European Space Agency (ESA) confirmed that attackers recently breached servers outside its corporate network, which contained what it described as "unclassified" information on collaborative ...